Secunia

William F. McCaw has discovered a weakness in rssh, which can be exploited by malicious users to bypass certain security restrictions.

The problem is that it is possible to gain knowledge of files in directories outside a chroot jail.

Example, which reveals files in the "/etc" directory:
scp [victim]:/etc/*

Successful exploitation requires that a malicious user has read/execute permissions on a directory in order to gain knowledge of files in it.

Solution
Update to version 2.2.1.
Further details available in Customer Area

Provided and/or discovered by
William F. McCaw

Changelog
Further details available in Customer Area

Deep Links
Links available in Customer Area